I tried every password I could think of.
Then I tried Google.
A search on "ARN password recover" turned up what I needed as the first link: a FAQ page with an article titled "Lost your ARN password?" Hallelujah! A procedure for interrupting the router's self-test and telling it to dump Manager's password. I now have a configured router ready to go, and one less thing to try to cram into tomorrow.